Deobfuscation

Deobfuscation of malicious code.

Description:

• evil_deobfuscator_b64.ps1 - Base-64 UTF-8
• evil_deobfuscator_b64uc.ps1 - Base64 UTF-16LE (Unicode)
• evil_deobfuscator_b64uc_gz_xor.ps1 - Base64 UTF-16LE (Unicode) > GZip > XOR
• evil_deobfuscator_b64uc_gz_xor_filein.ps1 - Base64 UTF-16LE (Unicode) > GZip > XOR (text file source)

Usage:

powershell .\*.ps1